Privacy Policy

Who is responsible for your data

The controller of the personal data collected through the l10n.gr website is Neurons Tech Ε.Ε. (“Neurons Tech”, “we”), Αγ. Γεωργίου 63, Νέα Ιωνία, Greece, VAT number 801881609, G.E.MI. number 165108303000. For anything concerning your data, you can contact us at info@neurons.tech.

This policy covers the public l10n.gr website only. Data processing in console.l10n.gr and in the platform services we provide to our partners is governed separately, by the partner agreement and the documents that accompany it.

What data we collect

When you fill in the interest form for businesses: your name, company, email, phone, role, the topics you are interested in and your message. When you fill in the form for Odoo partners, also: country, team size, Odoo experience, website, Odoo partner level and the number of projects you expect a year. With every form we record the language and the page you sent it from and, if you reached us through a campaign and have allowed it, the campaign parameters (utm) of the link.

Only your name, company and email are required; without them we cannot reply to your request. The other fields are optional. Please do not send us special categories of data, such as health data, or details of other people that you are not entitled to share, through the forms.

When you visit the website, our server necessarily receives some technical data, such as your IP address, browser type, the page you requested and the time of the request. Requests to the forms are recorded, with the IP address, in the server’s logs.

Only if you allow it, Google Analytics, as described on the Cookies page, collects further data about your use of the website, such as identifiers, the pages you visited, details of your device and your approximate location.

Why we use it and on what legal basis

To reply to your request and discuss a possible collaboration with you, such as a demo, a proposal or joining the partner programme. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and, when you act on behalf of your business, our legitimate interest in replying to business enquiries (Article 6(1)(f) GDPR).

To record the request in Neurons Tech’s customer relationship management system (CRM) and follow any business relationship that results. The legal basis is our legitimate interest in organising our contacts with prospective customers and partners (Article 6(1)(f) GDPR).

To know which campaign or link brought you to us and to measure website traffic with Google Analytics. The legal basis is your consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006), which you can withdraw at any time from “Cookie settings”, without affecting the lawfulness of processing before the withdrawal.

To keep the website secure and protect the forms from spam and automated submissions. For this, your browser solves a small computational puzzle (ALTCHA, which runs on our own servers, without cookies and without third parties), and we limit the number of submissions per IP address, keeping the address only in the server’s working memory. The legal basis is our legitimate interest in protecting the website and our systems (Article 6(1)(f) GDPR).

To comply with our legal obligations and to establish, exercise or defend legal claims (Article 6(1)(c) and (f) GDPR).

Where we rely on our legitimate interest, we have assessed that the processing is limited and expected by you, and you can object to it (see “Your rights”). We do not subscribe you to newsletters or send you marketing emails without your separate consent or another legal basis under Article 11 of Greek Law 3471/2006.

Who receives your data

Only the people at Neurons Tech who need your data for the purposes above can see it. To run the website we use the following providers, who process data on our behalf as processors (Article 28 GDPR), under their data protection terms:

Hetzner Online GmbH (Germany): hosting of the website and of the server that receives the forms. Every submission is stored there first, so it is not lost if the CRM is temporarily unavailable.

Odoo S.A. (Belgium): the Odoo Online service, which runs Neurons Tech’s CRM, where every request is recorded.

Amazon Web Services EMEA SARL (Luxembourg), through Amazon SES in the Stockholm region (Sweden): sending an email with the form details to the Neurons Tech team.

Microsoft Ireland Operations Limited (Ireland), through Microsoft Teams: technical alerts to our team when a submission does not reach the CRM, with the submission number and the technical error.

Google Ireland Limited (Ireland): Google Analytics, loaded through Google Tag Manager only after you give your consent. For some functions Google acts as an independent controller, under its own privacy policy.

If your business already works with an Odoo partner that uses l10n.gr, we may pass your request on to that partner so they can help you (legitimate interest, Article 6(1)(f) GDPR). From then on the partner processes the data as an independent controller.

Data may also be disclosed to public authorities where the law requires it, and to our legal or tax advisers, who are bound by confidentiality. We do not sell your data.

Transfers outside the European Economic Area

The website, the forms and email sending run on infrastructure in the European Union. Some providers (Amazon, Microsoft, Google) belong to groups based in the United States, and access to or transfer of data there cannot be ruled out, especially for Google’s tools. In those cases the transfer relies on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, where the recipient is certified under it, and on the Commission’s standard contractual clauses (Articles 45 and 46 GDPR). You can ask for more information at info@neurons.tech.

How long we keep it

We keep your data only for as long as necessary for the purpose for which we collected it: requests from the forms, for as long as our communication and any business relationship that follows last; technical data, for as long as needed to keep the website secure. After that we delete or anonymise it, unless the law requires us to keep it longer or we need it to establish, exercise or defend legal claims. For how long cookies last, see the Cookies page.

How we protect it

We take appropriate technical and organisational measures, such as an encrypted connection (HTTPS) across the website and a CRM connection for the forms through an account that can only record new requests. If a data breach affecting you occurs, we will act as Articles 33 and 34 GDPR require.

Your rights

You have the right of access to your data (Article 15 GDPR), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18) and to data portability (Article 20), where the processing is based on consent or a contract. You also have the right to object (Article 21) to processing based on our legitimate interest; you can object to processing for direct marketing at any time. Where the processing is based on your consent, you can withdraw it at any time (Article 7(3)).

To exercise your rights, write to us at info@neurons.tech. It is free of charge. We will reply without undue delay and within one month at the latest; if the request is complex, this period may be extended by two further months, in which case we will let you know (Article 12 GDPR). We may ask you for information to confirm your identity.

Automated decisions

We do not take decisions about you based solely on automated processing, including profiling, that produce legal effects for you or similarly significantly affect you (Article 22 GDPR).

Children

The website is meant for businesses and professionals. We do not knowingly collect data from minors; if we find that a minor has sent us a form, we will delete their details.

Complaints to the authority

If you believe that the processing of your data breaks the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, Greece, www.dpa.gr) or with the supervisory authority of the member state where you live or work. We would appreciate it if you contacted us first, so we can try to resolve the matter.

Changes to this policy

We update this policy when the way the website works or the law changes. The date of the last update is shown at the top of the page. If a change concerns processing based on your consent, we will ask for your consent again where required.